<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Tequila Fish &#187; Postfix/Sendmail</title>
	<atom:link href="http://www.tequilafish.com/category/tech/postfixsendmail/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.tequilafish.com</link>
	<description>Ran-dumb ramblings of me...</description>
	<lastBuildDate>Thu, 26 Jan 2012 23:30:47 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.2.1</generator>
		<item>
		<title>PostfixAdmin &#8211; Virtual Vacation warning: connect to transport vacation</title>
		<link>http://www.tequilafish.com/2007/06/19/postfixadmin-virtual-vacation-warning-connect-to-transport-vacation/</link>
		<comments>http://www.tequilafish.com/2007/06/19/postfixadmin-virtual-vacation-warning-connect-to-transport-vacation/#comments</comments>
		<pubDate>Tue, 19 Jun 2007 19:22:36 +0000</pubDate>
		<dc:creator>Administrator</dc:creator>
				<category><![CDATA[Postfix/Sendmail]]></category>
		<category><![CDATA[Tech]]></category>
		<category><![CDATA[postfix]]></category>
		<category><![CDATA[postfixadmin]]></category>
		<category><![CDATA[vacation]]></category>

		<guid isPermaLink="false">http://www.tequilafish.com/2007/06/19/postfixadmin-virtual-vacation-warning-connect-to-transport-vacation/</guid>
		<description><![CDATA[When trying to enable vacation/out-of-office support to our PostfixAdmin setup, I came across an error in /var/log/maillog: Jun 19 11:52:10 host postfix/qmgr[5084]: warning: connect to transport vacation: No such file or directory Turns out there is a typo in VIRTUAL_VACATION/INSTALL.txt. It tells you to add a service named "filter" to your master.cf file, but it [...]]]></description>
			<content:encoded><![CDATA[<div class="tweetmeme_button" style="">
			<a href="http://api.tweetmeme.com/share?url=http%3A%2F%2Fwww.tequilafish.com%2F2007%2F06%2F19%2Fpostfixadmin-virtual-vacation-warning-connect-to-transport-vacation%2F"><br />
				<img src="http://api.tweetmeme.com/imagebutton.gif?url=http%3A%2F%2Fwww.tequilafish.com%2F2007%2F06%2F19%2Fpostfixadmin-virtual-vacation-warning-connect-to-transport-vacation%2F&amp;style=normal&amp;b=2" height="61" width="50" /><br />
			</a>
		</div>
<p>When trying to enable vacation/out-of-office support to our <a href="https://sourceforge.net/projects/postfixadmin/">PostfixAdmin</a> setup, I came across an error in <tt>/var/log/maillog</tt>:</p>
<p><code>Jun 19 11:52:10 host postfix/qmgr[5084]: warning: connect to transport vacation: No such file or directory</code></p>
<p>Turns out there is a typo in <tt>VIRTUAL_VACATION/INSTALL.txt</tt>.  It tells you to add a service named "filter" to your <tt>master.cf</tt> file, but it should actually be named "vacation" like so:</p>
<p><code>vacation    unix  -       n       n       -       -       pipe<br />
  flags=DRhu user=vacation argv=/var/spool/vacation/vacation.pl</code></p>
]]></content:encoded>
			<wfw:commentRss>http://www.tequilafish.com/2007/06/19/postfixadmin-virtual-vacation-warning-connect-to-transport-vacation/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>phpList/Sendmail/Linux: X-Authentication-Warning</title>
		<link>http://www.tequilafish.com/2005/11/18/phplistsendmaillinux-x-authentication-warning/</link>
		<comments>http://www.tequilafish.com/2005/11/18/phplistsendmaillinux-x-authentication-warning/#comments</comments>
		<pubDate>Fri, 18 Nov 2005 20:35:04 +0000</pubDate>
		<dc:creator>Administrator</dc:creator>
				<category><![CDATA[phpList]]></category>
		<category><![CDATA[Postfix/Sendmail]]></category>
		<category><![CDATA[Tech]]></category>
		<category><![CDATA[sendmail]]></category>
		<category><![CDATA[x-authentication-warning]]></category>

		<guid isPermaLink="false">http://www.tequilafish.com/2005/11/18/phplistsendmaillinux-x-authentication-warning/</guid>
		<description><![CDATA[As a follow-up to my post on getting rid of the X-Authentication-Warning error when using phpList on FreeBSD, here's how to do the same in Linux. Open up /etc/mail/trusted-users in your favorite editor, and add both the user that your Apache is running under, as well as any usernames which are processing phpList queues and [...]]]></description>
			<content:encoded><![CDATA[<div class="tweetmeme_button" style="">
			<a href="http://api.tweetmeme.com/share?url=http%3A%2F%2Fwww.tequilafish.com%2F2005%2F11%2F18%2Fphplistsendmaillinux-x-authentication-warning%2F"><br />
				<img src="http://api.tweetmeme.com/imagebutton.gif?url=http%3A%2F%2Fwww.tequilafish.com%2F2005%2F11%2F18%2Fphplistsendmaillinux-x-authentication-warning%2F&amp;style=normal&amp;b=2" height="61" width="50" /><br />
			</a>
		</div>
<p>As a follow-up to my post on <a href="http://www.tequilafish.com/2005/06/30/phplistsendmailfreebsd-x-authentication-warning/">getting rid of the X-Authentication-Warning error when using phpList on FreeBSD</a>, here's how to do the same in Linux.</p>
<p>Open up <strong><tt>/etc/mail/trusted-users</tt></strong> in your favorite editor, and add both the user that your Apache is running under, as well as any usernames which are processing phpList queues and bounces via crontab.  For example, your trusted-users file should look like this:<br />
<code>httpd<br />
yourusername</code><br />
Save &#038; Exit.  Restart sendmail with the following command:<br />
<code>/etc/init.d/sendmail restart</code><br />
Now when you send mail with phpList, the headers won't contain <tt>X-Authentication-Warning</tt>s.</p>
<p>One security drawback that you should be aware of: Any user on your system can now use PHP to send email with "forged" headers. You basically just gave everyone on your system "Trusted User" status to Sendmail, so be sure that you trust your users before actually doing this!</p>
<p>See how to <a href="http://www.tequilafish.com/2005/06/30/phplistsendmailfreebsd-x-authentication-warning/">do this on FreeBSD</a></p>
]]></content:encoded>
			<wfw:commentRss>http://www.tequilafish.com/2005/11/18/phplistsendmaillinux-x-authentication-warning/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>phplist/Sendmail/FreeBSD: X-Authentication-Warning</title>
		<link>http://www.tequilafish.com/2005/06/30/phplistsendmailfreebsd-x-authentication-warning/</link>
		<comments>http://www.tequilafish.com/2005/06/30/phplistsendmailfreebsd-x-authentication-warning/#comments</comments>
		<pubDate>Fri, 01 Jul 2005 01:40:59 +0000</pubDate>
		<dc:creator>Administrator</dc:creator>
				<category><![CDATA[FreeBSD]]></category>
		<category><![CDATA[phpList]]></category>
		<category><![CDATA[Postfix/Sendmail]]></category>
		<category><![CDATA[Tech]]></category>
		<category><![CDATA[sendmail]]></category>
		<category><![CDATA[x-authentication-warning]]></category>

		<guid isPermaLink="false">http://www.tequilafish.com/?p=14</guid>
		<description><![CDATA[If you enable the $message_envelope variable in the config.php file of phplist for processing bounces, sendmail will probably complain with the following header in your email: X-Authentication-Warning: your.domain.com: httpd set sender to account@domain.com using -f This is because only "trusted users" are allowed to change the message envelope. By default, sendmail only considers root, daemon, [...]]]></description>
			<content:encoded><![CDATA[<div class="tweetmeme_button" style="">
			<a href="http://api.tweetmeme.com/share?url=http%3A%2F%2Fwww.tequilafish.com%2F2005%2F06%2F30%2Fphplistsendmailfreebsd-x-authentication-warning%2F"><br />
				<img src="http://api.tweetmeme.com/imagebutton.gif?url=http%3A%2F%2Fwww.tequilafish.com%2F2005%2F06%2F30%2Fphplistsendmailfreebsd-x-authentication-warning%2F&amp;style=normal&amp;b=2" height="61" width="50" /><br />
			</a>
		</div>
<p>If you enable the <tt>$message_envelope</tt> variable in the <tt>config.php</tt> file of phplist for processing bounces, sendmail will probably complain with the following header in your email:<br />
<code>X-Authentication-Warning: your.domain.com: httpd set sender to account@domain.com using -f</code><br />
This is because only "trusted users" are allowed to change the message envelope.  By default, sendmail only considers root, daemon, and uucp as trusted users, so if you try changing the message envelope as the user Apache is running under (in my case httpd) sendmail will attach that nasty warning header to all your outgoing mails.  Spam blockers don't like this!</p>
<p>There are a couple of ways to fix this:</p>
<ol>
<li>Add httpd (or whatever user Apache is running under) to the daemon group:<br />
<code>pw groupmod daemon -M httpd</code>
</li>
<li>Add httpd (or whatever user Apache is running under) to Sendmail's trusted-users file.  Open up <strong><tt>/etc/mail/your.domain.com.submit.mc</tt></strong> in vi and insert the following line:<br />
<code>FEATURE(`use_ct_file') dnl  # Trusted users</code><br />
Save &#038; Exit.<br />
Now you must create the <tt>trusted-users</tt> file in <tt>/etc/mail</tt>:<br />
<code>touch /etc/mail/trusted-users</code><br />
Open <strong><tt>/etc/mail/trusted-users</tt></strong> with vi and on one line simply add the name of the user under which Apache is running:<br />
<code>httpd</code><br />
Save &#038; Exit.  Run the following commands in <strong><tt>/etc/mail</tt></strong> to commit the changes to Sendmail and restart the server:<br />
<code>make install<br />
make restart</code>
</li>
</ol>
<p>That's it, you should be good to go.  Mail sent via PHP/Apache will no longer contain the <tt>X-Authentication-Warning</tt> header.</p>
<p>Note that there is a downside to this.  Any user on your system can now use PHP to send email with "forged" headers.  You basically just gave everyone on your system "Trusted User" status to Sendmail, so be sure that you trust your users before actually doing this!</p>
<p><strong>UPDATE:</strong> <a href="http://www.tequilafish.com/2005/11/18/phplistsendmaillinux-x-authentication-warning/">How to do the same in Linux</a></p>
]]></content:encoded>
			<wfw:commentRss>http://www.tequilafish.com/2005/06/30/phplistsendmailfreebsd-x-authentication-warning/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

